Not sure if this is news to any regular readers of this blog, but privacy incidents are very often the fault of employees. Poorly trained employees and malicious employees:
Identity thefts often inside job:
"You do everything right.
You protect your Social Security number like the Swiss Guard protects the pope.
You shred more documents than a secretary for Oliver North.
You never -- ever -- respond to those e-mails requesting PIN numbers and birth dates.
But before you can say "Club Med, Bora Bora," some identity thief has booked the honeymoon suite there with a credit card in your name.
How could this happen?
Here's the scary reality: It might have been an inside job.
And there's no way you could have stopped it...."